[kube-state-metrics] set parameters for podsecurity restricted

Signed-off-by: Pat Riehecky <riehecky@fnal.gov>
prometheus-community · Apr 5, 2023 · 8b1d483 · 8b1d483
1 parent a3c0023
commit 8b1d483
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/charts/kube-state-metrics/values.yaml b/charts/kube-state-metrics/values.yaml
@@ -214,7 +214,14 @@ securityContext:
   enabled: true
   runAsGroup: 65534
   runAsUser: 65534
+  runAsNonRoot: true
   fsGroup: 65534
+  allowPrivilegeEscalation: false
+  capabilities:
+    drop:
+    - ALL
+  seccompProfile:
+    type: RuntimeDefault
 
 ## Specify security settings for a Container
 ## Allows overrides and additional options compared to (Pod) securityContext